Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/RfdOQGmkYTTjin9ZgjbjXjrpPgc.roa
File: RfdOQGmkYTTjin9ZgjbjXjrpPgc.roa (raw, json)
Hash identifier: JTmIyBnyDkOlsVjRpBI7lKT9hKtQCaDVpk53EjAgib4=
Subject key identifier: 45:F7:4E:40:69:A4:61:34:E3:8A:7F:59:82:36:E3:5E:3A:E9:3E:07
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCB01EB560792011A0A6D99E040E2BD
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/RfdOQGmkYTTjin9ZgjbjXjrpPgc.roa
Signing time: Sun 01 Jan 2023 10:05:21 +0000
ROA not before: Sun 01 Jan 2023 10:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199902
IP address blocks: 192.121.120.0/24 maxlen: 24
192.121.3.0/24 maxlen: 24
192.71.191.0/24 maxlen: 24
192.36.97.0/24 maxlen: 24
192.71.190.0/24 maxlen: 24
192.71.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:01:eb:56:07:92:01:1a:0a:6d:99:e0:40:e2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45f74e4069a46134e38a7f598236e35e3ae93e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:df:93:e7:27:83:27:86:b4:d1:59:9f:de:2d:
ae:49:8a:d0:dd:9d:9d:03:81:89:dc:73:f6:4e:bf:
69:e6:ed:7a:b2:ef:a3:60:21:7c:7a:13:f3:7d:e4:
c1:8d:45:3c:2d:df:b1:49:5f:a6:6f:cd:24:74:32:
5e:41:69:dc:d2:19:f2:c3:b7:03:ff:7a:b9:c2:e1:
ee:3b:03:0c:0e:27:5c:61:76:ae:b6:fb:8e:45:e8:
26:08:bb:ec:7b:54:25:f3:1d:5c:76:3b:6e:b7:da:
5f:7b:06:2c:0d:e5:39:a8:59:e8:3a:62:0d:9c:7f:
24:8b:ba:18:7e:51:e8:6d:a0:0e:b7:7a:d0:95:63:
00:cc:21:4b:f6:ab:f2:f9:0c:cd:ab:d7:f7:a8:0e:
cf:71:44:15:95:82:a4:de:bb:ff:bb:0b:ce:1f:b2:
30:bb:a0:1a:70:63:fd:a2:78:d2:2f:f2:5b:a5:b6:
f3:5a:76:f3:32:5f:89:e8:da:67:08:c2:60:41:ca:
b6:39:97:3b:60:28:27:42:af:9a:49:22:d3:8f:d3:
c8:b1:d0:4e:82:b1:e6:ac:48:3a:8e:24:bf:27:d3:
6c:6c:31:af:76:da:ba:0d:05:ea:46:a2:7f:68:01:
c6:cf:2b:22:57:d3:ef:7b:2d:aa:b8:2e:14:e6:a6:
bb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F7:4E:40:69:A4:61:34:E3:8A:7F:59:82:36:E3:5E:3A:E9:3E:07
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/RfdOQGmkYTTjin9ZgjbjXjrpPgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.97.0/24
192.71.188.0/24
192.71.190.0/23
192.121.3.0/24
192.121.120.0/24
Signature Algorithm: sha256WithRSAEncryption
af:20:7f:bd:01:cf:8b:96:ab:da:33:80:fc:b7:05:61:95:82:
74:2c:c1:7b:83:c1:39:76:59:c7:fc:3e:3b:cf:60:41:85:5b:
49:4b:95:fb:05:b1:15:b4:fd:6d:de:0c:0d:f6:c4:75:9f:54:
9e:af:1e:b5:e5:66:4e:52:bd:47:a7:98:cf:97:b4:06:32:87:
ec:ba:56:65:31:61:a4:41:41:04:b2:78:ac:ab:6a:b9:db:62:
28:b6:41:21:bd:cf:7d:68:8e:48:09:30:b4:15:e3:f1:7c:96:
38:d2:8e:3f:1d:45:96:27:3b:2e:c4:20:ad:17:c7:e6:e8:28:
67:a7:53:85:d3:ad:09:7d:ca:e0:57:af:ef:66:6c:f9:c1:f6:
6a:9d:db:8c:a3:72:ec:2c:7a:13:49:2d:cd:1b:cd:9f:ac:ef:
19:c4:37:22:e5:bc:d4:d0:8c:28:f5:b3:a4:d9:a6:8c:a2:7a:
f8:c8:a5:50:06:3d:ac:0d:7e:eb:9d:2e:23:a5:31:c7:f2:0c:
ec:72:1b:d9:41:a8:4f:1b:6b:1d:9e:7c:b8:b5:be:39:bc:ac:
84:12:a3:53:28:16:88:73:b5:41:21:11:84:67:2f:e8:26:07:
f9:e1:e7:dc:90:d6:db:c1:95:a0:9f:cb:61:fc:83:81:6b:d1:
a5:72:e4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:41 2025 by rpki-client